Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa
File:                     3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier:          2GYkIwfcoNhRIX/x6OzR/AqePAsvvPJnn9St0T0faBY=
Subject key identifier:   C8:24:48:C4:A5:A5:85:D4:F5:FC:F1:13:67:44:A1:75:C1:19:D6:48
Certificate issuer:       /CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
Certificate serial:       38C05A1AB57E9CDEF47C63D519A6113A8AC3A349
Authority key identifier: 4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa
Signing time:             Fri 12 Apr 2024 16:19:56 +0000
ROA not before:           Fri 12 Apr 2024 16:14:56 +0000
ROA not after:            Fri 11 Apr 2025 16:19:56 +0000
asID:                     271390
IP address blocks:        181.189.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c0:5a:1a:b5:7e:9c:de:f4:7c:63:d5:19:a6:11:3a:8a:c3:a3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
        Validity
            Not Before: Apr 12 16:14:56 2024 GMT
            Not After : Apr 11 16:19:56 2025 GMT
        Subject: CN=C82448C4A5A585D4F5FCF1136744A175C119D648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:67:ff:b9:43:d0:ec:85:04:a3:56:72:dd:
                    b3:25:6d:f1:7e:6f:ca:c1:21:ca:e4:87:55:c6:42:
                    75:cd:c7:b3:82:d7:61:f8:37:e7:d3:a0:30:b4:e5:
                    24:6b:45:a2:7a:1d:63:cb:c5:39:56:91:b6:f7:96:
                    07:c2:c4:17:68:ab:7f:68:10:0b:39:a5:cd:50:88:
                    da:8d:b5:f1:f5:f0:fd:42:5a:66:1a:af:48:f9:ad:
                    29:6e:db:1b:3c:10:4b:75:43:7c:e6:5d:52:ef:e6:
                    7e:d0:1b:97:b2:f9:39:90:0c:70:b4:f8:bc:a5:53:
                    92:0d:4b:81:6d:d5:4d:d5:23:20:41:2a:ea:00:31:
                    89:b1:57:ec:98:89:90:b9:88:84:3c:ae:74:ee:43:
                    b9:64:87:28:c8:ad:be:61:5c:82:3a:92:a5:a0:da:
                    7c:9e:69:45:a7:35:44:98:b3:88:e3:67:1d:b5:8b:
                    a7:97:f0:ef:6a:a9:fa:b9:c3:e0:04:69:39:19:65:
                    f0:4e:19:9f:f6:10:c9:55:88:80:a6:67:fb:6c:ae:
                    ba:cd:1c:7b:37:91:14:5c:9c:60:1b:51:f2:c7:a9:
                    7a:2a:48:b1:5c:2c:a5:ff:79:35:ca:29:f5:94:50:
                    79:71:c0:ca:1f:1a:b3:65:d0:14:2b:c9:5d:0d:ef:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:24:48:C4:A5:A5:85:D4:F5:FC:F1:13:67:44:A1:75:C1:19:D6:48
            X509v3 Authority Key Identifier:
                keyid:4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:70:9e:09:16:db:1a:ca:fe:d4:74:b2:07:72:d3:15:2e:97:
         6a:e2:e8:c7:36:1d:41:5a:e8:cd:61:f1:11:4c:0c:b7:23:6e:
         58:12:15:89:68:ca:17:e8:6a:03:b3:d6:78:72:5c:50:cb:e5:
         8b:07:31:95:17:22:18:b0:e2:4f:1d:fa:1f:a1:90:37:2c:38:
         59:79:94:c3:64:6c:71:39:45:a4:90:df:1c:bf:de:e8:09:07:
         3f:03:8d:7e:06:5c:b4:85:2a:41:ae:e6:99:9c:51:8a:51:15:
         ee:d6:9f:d0:04:13:9a:31:ed:69:f5:88:6f:44:19:9b:ce:89:
         dc:77:89:d6:06:9a:82:2d:fc:be:de:6c:48:f3:3e:bb:5d:cb:
         98:2e:63:a3:fd:e5:cf:94:db:0b:0f:86:a0:53:ac:ee:1f:71:
         58:3c:5c:b6:a2:3b:59:72:ce:1b:45:8a:26:c9:79:41:1b:11:
         00:e5:4e:0a:c6:08:c8:a4:db:95:6f:17:ac:d4:df:71:c6:f4:
         76:bf:41:4d:f0:36:3e:d6:9f:41:9b:12:4e:73:c2:7a:38:46:
         a5:ad:ef:8b:8a:ee:6d:db:af:35:89:93:46:6d:60:14:c8:83:
         64:68:3f:6d:bd:d5:fd:89:d6:19:c3:68:be:27:98:2f:ce:8d:
         7a:35:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org